Web-sites should not use the unsafe-url policy, as this can lead to HTTPS URLs to get uncovered over the wire over an HTTP connection, which defeats among the crucial privacy and safety ensures of HTTPS. SSL/TLS is particularly fitted to HTTP, since it can provide some safety whether or not http://XXX